Comment 0 for bug 1788102

NTPsec 1.1.0 changed the way it writes the drift file. The new drift file is written to ntp.drift-tmp before being renamed to ntp.drift. The apparmor policy does not allow writing to ntp.drift-tmp. As a result, NTPsec is not able to write the drift file.

Failing to write the drift file means that every time ntpd starts up, it has to recalculate the system's drift from scratch. This reduces clock accuracy for some time.

The fix is to update the apparmor policy to allow writing to ntp.drift-tmp at the same locations as ntp.drift.